diff options
| author | Jarka Kadlecova <jarka@gitlab.com> | 2017-10-16 19:47:26 +0300 |
|---|---|---|
| committer | Jarka Kadlecova <jarka@gitlab.com> | 2017-10-16 19:47:26 +0300 |
| commit | e9788c92e3aac48a0d46257890296a4b155c3cb1 (patch) | |
| tree | 1170ebca2e273331f07ae7847a123650ff46c58f | |
| parent | a2eec9fb09574cf2ee5683b283b4632b37ee332c (diff) | |
Update CHANGELOG.md for 9.5.9
[ci skip]
6 files changed, 8 insertions, 24 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 7f6bba82021..f69c110383a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,14 @@ documentation](doc/development/changelog.md) for instructions on adding your own entry. +## 9.5.9 (2017-10-16) + +- [SECURITY] Move project repositories between namespaces when renaming users. +- [SECURITY] Prevent an open redirect on project pages. +- [SECURITY] Prevent a persistent XSS in user-provided markup. +- [FIXED] Allow using newlines in pipeline email service recipients. !14250 +- Escape user name in filtered search bar. + ## 9.5.8 (2017-10-04) - [FIXED] Fixed fork button being disabled for users who can fork to a group. diff --git a/changelogs/unreleased/37759-also-treat-newlines-as-separator.yml b/changelogs/unreleased/37759-also-treat-newlines-as-separator.yml deleted file mode 100644 index 6894e650c11..00000000000 --- a/changelogs/unreleased/37759-also-treat-newlines-as-separator.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Allow using newlines in pipeline email service recipients -merge_request: 14250 -author: -type: fixed diff --git a/changelogs/unreleased/38126-security-username-change.yml b/changelogs/unreleased/38126-security-username-change.yml deleted file mode 100644 index 6b0dfc3dca2..00000000000 --- a/changelogs/unreleased/38126-security-username-change.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Move project repositories between namespaces when renaming users -merge_request: -author: -type: security diff --git a/changelogs/unreleased/fix-arbitrary-redirect-vulnerability.yml b/changelogs/unreleased/fix-arbitrary-redirect-vulnerability.yml deleted file mode 100644 index 8d456b57963..00000000000 --- a/changelogs/unreleased/fix-arbitrary-redirect-vulnerability.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Prevent an open redirect on project pages -merge_request: -author: -type: security diff --git a/changelogs/unreleased/rs-sanitize-unicode-in-protocol.yml b/changelogs/unreleased/rs-sanitize-unicode-in-protocol.yml deleted file mode 100644 index 093c99943e2..00000000000 --- a/changelogs/unreleased/rs-sanitize-unicode-in-protocol.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -title: Prevent a persistent XSS in user-provided markup -merge_request: -author: -type: security diff --git a/changelogs/unreleased/winh-search-bar-xss-9-5.yml b/changelogs/unreleased/winh-search-bar-xss-9-5.yml deleted file mode 100644 index 0533fee9b3a..00000000000 --- a/changelogs/unreleased/winh-search-bar-xss-9-5.yml +++ /dev/null @@ -1,4 +0,0 @@ ---- -title: Escape user name in filtered search bar -merge_request: -author: |